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(_P ' Abstract. We show that if E is an eUiptic curve over Q with a Q-rational 

Cn , isogeny of degree 7, then the image of the 7-adic Galois representation attached 

to E is as large as allowed by the isogeny, except for the curves with complex 
multiplication by Q(\/— 7). 

The analogous result with 7 replaced by a prime p > 7 was proved by 
the first author in [7]. The present case p = 7 has additional interesting 
complications. We show that any exceptions correspond to the rational points 
on a certain curve of genus 12. We then use the method of Chabauty to show 
that the exceptions are exactly the curves with complex multiplication. 

As a by-product of one of the key steps in our proof, we determine exactly 
when there exist elliptic curves over an arbitrary field k of characteristic not 
7 with a fc-rational isogeny of degree 7 and a specified Galois action on the 
kernel of the isogeny, and we give a parametric description of such curves. 
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1. Introduction 



CN ' Suppose that E is an elliptic curve defined over Q, p is a rational prime, Tp{E) 

^ ! is the p-adic Tate module of E, and Gq = Gal(Q/Q). Then there is a natural 

homomorphism 

^: PE.p-. GQ^Antz JTp{E)) 

■"sj" ' giving the action of Gq on Tp{E). Since Tp{E) is a free Zp-module of rank 2, 

f->^ . AutZp{Tp{E)) can be identified (non-canonically) with GL2(Zp). Serre [TB] showed 

^^ ' that if E does not have complex multiplication (CM), then pe,p{Gq) has finite 

^^ . index in Aut{Tp{E)) , and pE,p is surjective for all but finitely many primes p. 

Suppose now that E has an isogeny of degree p that is defined over Q (in other 
words, E has a Q-rational p-isogeny). Mazur [Ol showed that p is then in the 
finite set {2, 3, 5, 7, 11, 13, 17, 19, 37, 43, 67, 163}, and if further E is non-CM, then 
p G {2,3,5,7,11,13,17,37}. The kernel of the isogeny is a Q-rational subgroup 
C^ I ^ of E{Q) of order p. Since Aut(^) = F^ , the action of Gq on ^ is given by a 

homomorphism ■0 : Gq -^ F^ . We refer to ip as the character of the isogeny. 

The isogeny and the corresponding character -0 put an obvious constraint on the 
image of the map pE,p- In particular, pE,p cannot be surjective. If E has complex 
multiplication, then the additional endomorphisms of E put another constraint on 
the image of pE,p- In that case, pe,p{Gq) is a p-adic Lie group of dimension 2. We 
wish to understand whether these are the only constraints, or equivalently, whether 
there are any non-CM elliptic curves over Q for which pe,p{Gq) does not contain 
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a Sylow pro-p subgroup of AutZpiTp^E)). This is the motivation for the fohowing 
definition. 

Definition 1.1. We will say that a curve E over Q is p-exceptional if E has an 
isogeny of degree p defined over Q and the image of pE,p does not contain a Sylow 
pro-p subgroup of Autzp(Tp (£')). 

In other words, a curve E with a Q-rational p-isogeny is p-exceptional if the 
index of Pe,p{Gq) in Autz {Tp{E)) is divisible by p. If E is not p-exceptional, then 
the image of ps.p is as large as it could be, given the existence of a Q-isogeny for E 
of degree p with character if). Note that if E is p-exceptional, then so is any curve 
Q-isogenous to E, and if p > 2 then so is any quadratic twist of E (see [3)- If E 
has CM, then as remarked above, E is p-exceptional. 

If p < 7, then non-CM p-exceptional curves exist in abundance. Concerning the 
case p = 5, Theorem 2 in [7] describes completely the possible images of PE,5. Its 
index cannot be divisible by 5^ and is divisible by 5 if and only if E has a cyclic 
Q-isogeny of degree 5^ or two independent Q-isogenies of degree 5. 

In this paper we prove that the only 7-exceptional elliptic curves are the elliptic 
curves with complex multiplication by Q(-\/— 7). The method of proof is as follows. 
We begin with two results from 7 . Let w : Gq -^ F^ denote the cyclotomic 
character giving the action of Gq on /i . 

Theorem 1.2 ([7], Theorem 1). Suppose p > 7 and E is an elliptic curve over Q 
with a Cl-isogeny of degree p. Let ip denote the character of the isogeny. Ifijj'^ 7^ oj'^ , 
then E is not p-exceptional. 

Proposition 1.3 (^Tj, Remark 4.2.1). Suppose p > 7 and E is an elliptic curve 
over Q with a Q-isogeny of degree p and character ip. If ip* = liP' , then E has CM. 

These two results combine to show that there are no non-CM p-exceptional 
curves when p > 7. However, Proposition 11.31 fails when p = 7 (as can be seen by 
considering the family of elliptic curves with a Q-isogeny of degree 7 and character 
ip = uj^; see Q. 

Suppose E is a 7-exceptional elliptic curve. By Theorem 1 1.2) if ip is the character 
of the isogeny, then ■0^ =0;^. It follows that the F^ -valued character tpoj"^ has 
order dividing 2. Thus, replacing E by a quadratic twist if necessary, we may 
assume that ip = uj^. In fj2]we show that if E is 7-exceptional, then the ratio of 
the minimal discriminants of E and its 7-isogenous curve is of the form l^w"^ with 
w e Q and s e Z. 

An explicit description of the family {B^} of elliptic curves over Q with a Q- 
rational 7-isogeny with character -0 = w^ follows from the results in Ej31 The curve 
E is isomorphic over Q to By for some u G Q . In Corollary 14.61 we show that for 
t; G Q, the ratio of the minimal discriminants of B^ and its 7-isogenous curve is 
7'^^g{v)^, where g{v) := {v^ — 2v^ — v-\- l)/{v^ — v^ — 2v-\-l). Thus the exceptional 
E's correspond to Q-rational points on the genus 12 curves Cj : w'' — 7^g{v). If 
7 1 J, then it turns out that Cj has no rational points over Q7, and hence none over 
Q. Thus, the question is reduced to finding the Q-rational points on the curve 

Go : w^ = [v^ -2v^ -v + l)/{v^ ~ v^ - 2v + 1). 

In ^ we use the method of Chabauty to show that 

CoiQ) - {(0, 1), (1, 1), (00, 1), (2,-1), (1/2, -1), (-1, -1)}, 
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and it follows that the only 7-exceptional elliptic curves E are the curves with 
j{E) = —15"^ or 255"^, i.e., the curves with complex multiplication by Q(V~7). 

Now suppose that fc is a field of characteristic different from 7, that E is an 
elliptic curve defined over fc, and that E has a fc-rational isogeny of degree 7. Then 
the kernel of the isogeny is a fc-rational subgroup * of E{k^) of order 7, where fc** 
denotes a fixed separable closure of fc. Let Gk — Ga\{k^/k). Since Aut(^) = Fj, 
the action of Gk on ^ is given by a homomorphism ip : Gk ^ Fy . Again, we refer 
to ip as the character of the isogeny. For example, the character ip is trivial if and 
only if ^1/ C E{k). 

Now let ip : Gk ^ F^ be a fixed homomorphism. In ^we describe all elliptic 
curves defined over fc that have a fc-rational 7- isogeny with character ip. We will 
give explicit formulas for a family of elliptic curves {^i,}, where v varies over an 
explicit Zariski open subset of the projective line P^ , such that 

• for every w G fc, the elliptic curve Ay has a fc-rational 7-isogeny and char- 
acter -0, 

• if E' is an elliptic curve over fc with a fc-rational 7-isogeny and character 
"0, then E is isomorphic over fc to Ay for some w e fc. 

See Theorems 13.61 and 13.101 for more precise statements. One consequence of this 
explicit description is that if fc 7^ F2, and if ip is any character, then there is an 
elliptic curve over fc that has a fc-rational 7-isogeny with character ip (see Corollary 
I3.12P . Note that these explicit families are of a different nature and are constructed 
differently from the explicit families of elliptic curves with a given mod N rep- 
resentation that were constructed earlier by the second and third authors of this 
paper. 

The route we took to exactly determine Co(Q) is interesting in itself. (See 
Remark 16.61 for more information.) By Faltings' proof of the Mordell Conjecture, 
|Co(Q)| is finite. An action of the group ^3 on Cq shows that |Co(Q)| is divisible 
by 6. A descent argument (see Q shows that the rank of the Jacobian J of Co is 
at most 6. In fact, the 6 known points generate a subgroup of J(Q) of rank 4 and 
J is Q-isogenous to the square of the Jacobian of a genus 6 curve D defined over 
Q. Thus the rank of J(Q) must be either 4 or 6. 

A Chabauty argument at the prime 2 then gives that |Co(Q)| is either 6 or 12. 
At our request, Kiran Kedlaya and Jennifer Balakrishnan, with help from Joseph 
Wetherell, computed 2-adic Coleman integrals that we hoped would directly rule 
out the case |Co(Q)| = 12. However, the computed dimensions worked out in such 
a way that one would need to show that the rank of J(Q) were 4 to use this method 
to show |Co(Q)| ^ 12. 

This gave motivation to determine the rank of J(Q), i.e., to determine the par- 
ity of the rank of the Jacobian Jac(-D) of the genus 6 curve D. Using data and 
information provided by Balakrishnan, Sutherland, Kedlaya and the fourth author 
of this paper, Michael Rubinstein performed computations that gave convincing 
evidence that the analytic rank of Jac(_D) is 3, so one expects rank(J(Q)) = 6. 

This gave motivation to find additional generators of J(Q), which is done at 
the end of ^ below. We used these additional points to finish the proof that 
|C'o(Q)| = 6, using a Chabauty argument at the prime 5 (see ^. 

We thank Bjorn Poonen for helpful conversations. We thank Jennifer Balakrish- 
nan, Kiran Kedlaya, Michael Rubinstein, Andrew Sutherland, and Joseph Wetherell 
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for computations that pointed the way to the correct path to take to achieve The- 
orem [531 We made use of PARI/GP [Mj and Magma [1]. 

2. The image of pE,p 

We assume throughout this section that E is an ehiptic curve defined over Q 
that has a Q-isogeny of prime degree p > 7. Let ^ denote the kernel of the isogeny 
and let $ = E[p]/'^. The actions of Gq on ^ and $ are given by characters 
ip,(p : Gq — > Fp , respectively. Let w : Gq — )■ Fp denote the cyclotomic character 
giving the action of Gq on fi . That is, if cr G Gq and Cp is a primitive p-th root 

of unity in Q, then Cp — (^p . Since ipif = oj, which is an odd character, we have 
tp ^ ip. Hence ^ ^ $ as GQ-modules. 

Let Kaa = Q{E[p°°]) and let pE^p ■ Gq -^ AutZp{Tp{E)^ be the homomorphism 
giving the action of Gq on the Tate module Tp{E). Then pE^p factors through 
the Galois group G := GaX{Kao/Q,), and defines an injective homomorphism from 
G into Autzj^ (Tp(i5)). To simplify the discussion, we identify G with its image in 
Autzp{Tp{E)). 

Recall the definition of p-exceptional from SJTJ We would like to know whether 
Pe,p(Gq) contains a Sylow pro-p subgroup of Aut(Tp(ii^)), or equivalently, whether 
the index [A\it'z,j,{Tp{E)) : Pb,p(Gq)] is prime to p. 

If we choose a basis for Tp{E) to identify Aut(Tp(i?)) with GL2(Zp), then the 
Sylow pro-p subgroups of Aut(rp(£;)) are identified with the conjugates of 

(l+pZp Zp \ 

\ pZp 1+pZp) ■ 

There are p + 1 such conjugates, all containing I2 + pM2(Zp). 

Let /f = Q($, $), the fixed field for the intersections of the kernels of ^p and ip. 
Then K is an abelian extension of Q and [Q(_E[p]) : i^] is 1 or p. Since [K : Q] 
divides {p — 1)^, it is not divisible by p. Let 

S := Gal{K^/K). 

Then 5 is a normal subgroup of G and is the (unique) Sylow pro-p subgroup of G. 
Let 

E' := E/^. 
Thus E' has a Q-isogeny of degree p with kernel $ and character ip. 

Remark 2.1. The assumption that p > 7 implies that an elliptic curve over Q 
cannot have a GQ-invariant cyclic subgroup of order p^. This is due to Mazur |13| 
for most primes, Ligozat pjj or Kenku j9] for p = 7, and Kenku ^ for p = 13. 
It follows that an elliptic curve over Q cannot have two independent Q-isogenies 
of degree p > 7. To see this, suppose to the contrary that i?[p] = ^ x $. Let 
G = {P G £■ : pP e <&} C E[p\ which is obviously GQ-invariant. Then G/* is 
a GQ-invariant cyclic subgroup of E' of order p^, which is not possible. It follows 
that both of the fields Q(£^[p]) and Q(i?'[p]) are cyclic extensions of K of degree p. 

Proposition 2.2 ( 7 , Proposition 4.3.2). The curve E is p-exceptional if and only 
z/Q(S[p]) = Q(P'[p]). 

The proof of this proposition in ]7j is based on the Burnside Basis Theorem. 
The Frattini quotient of a Sylow pro-p subgroup Sp of Aut (Tp(i?)) containing S 
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has Fp-dimension 3. It turns out that the image of S in that Frattini quotient has 
Fp-dimension 2 if Q(i5[p]) ~ Q{E'[p]), and Fp-dimension 3 if those two fields are 
distinct. In the latter case, one can find a set of topological generators for Sp in S', 
which then implies that S = Sp. 

The following lemma will provide one way to verify that Q{E[p]) ^ Q(i?'[p]). 
Note that if i is a Galois extension of Q containing K and \L : K\= p, then the 
ramification degree for a prime i in the extension i/Q is divisible by p if and only 
if the primes of K lying over i are ramified in L/K. We then simply say that i is 
ramified in L/K. Interestingly, ii i ^ p, then £ can be ramified in at most one of 
the extensions Cl{E[p])/K or Cl{E'[p])/K. 

Lemma 2.3. Assume that £ is a prime and that £ ^ p. Then the ramification 
degree of £ in at least one of the two extensions Q(i?[p])/Q and Q(-E'[p])/Q is 
prime to p. 

Proof. Assume that the ramification degree of £ in Q{E[p]) / Q is divisible by p. This 
implies that E has bad reduction at £. If E had potentially good reduction at £, 
then the only primes that could divide the ramification degree for £ in Q(i?[p])/Q 
are 2 and 3 (see for example the proof of Corollary 2(a) to Theorem 2 of 17J). 
This contradicts the assumption that p > 7. Hence, E must have multiplicative or 
potentially multiplicative reduction at £. It follows from Proposition 23(b) of [TB] 
that E has multiplicative reduction over K at all primes above £. 

Fix a prime A of Koo lying above £, and let / be the inertia group for A in 
S. The Tate parametrization shows that for every n, the group E[p"Y contains a 
cyclic subgroup of order p". Since / fixes K = Q(^, $), we have ^ C E[pY . On the 
other hand, since the ramification degree of £ in Q(i?[p])/Q is divisible by p, I acts 
nontrivially on E[p], and so we have E[pY = $. Hence i?[p"]^ is cyclic of order p" 
for every n. In particular, multiplication by p gives an /-equivariant isomorphism 
E[p'^Y /'^ ^ ^. Therefore, we have /-equivariant isomorphisms 

E'[p] = iE/^)[p] = E[p^Y/'^ X E[p]/^ ?^ * X $. 

Since / acts trivially on both $ and ^I^, it acts trivially on i?'[p], so Q{E'[p])/K is 
unramified above £. Since [K : Q] is prime to p, it follows that the ramification 
degree of £ in Q{E'[p])/Q is prime to p. D 



Remark 2.4. Lemma [2?3l can also be proved by studying how the Tate period for 
E over Qf changes under the isogeny E ^ E' . The advantage of the above proof 
is that it also could be applied to the p-adic representations attached to modular 
forms, under suitable assumptions. 

Lemma 2.5. If ipip^^ has order 2, then p = 3 (mod 4) and i^(p~'^ = U}''P~^^^^. 

Proof. Since ijjip = uj and tp has order dividing p — 1, we have 

[ipip ) 2 = [LOip ) 2 = OJ 2 

Since w has order p—1, we see that (ipip^^pf^^'''^ is nontrivial. liijjip^^ is quadratic, 
we conclude that (p— 1)/2 is odd and hence that ('i/;(^^^)(P^^)/^ = V'V'^^- The lemma 
follows. D 

Proposition 2.6. Suppose that ip(p~^ has order 2. Then E is p-exceptional if 
and only if for every prime £ ^ p, the ramification degrees of £ in Q(_E[p])/Q and 
Q(i?'[p])/Q are both prime to p. 
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Proof. Let L = Q{E[p]) and L' ^ Q{E[p]). By Remark EH L and L' are cyclic 
extensions of K of degree p. 

Suppose first that E is p-exceptional, and £ ^ p. By Lemma l2.3[ tlie ramification 
degree of £ in at least one of L/Q and L'/Q is prime to p. But by Proposition 12.21 
we have L = L\ so the ramification degrees of £ in L/Q and i'/Q must both be 
prime to p. 

Now suppose that for every prime £ =/^ p, the ramification degrees of £ in £/Q and 
L'/Q are both prime top. Let ^ — ipip^^. Since £, = (,^^, the action of Gal(iir/Q) on 
both Gal{L/K) and Ga\{L' / K) is given by ^. Let F denote the quadratic extension 
of Q corresponding to £,. Then F C K, and F — Q(\/— p) by Lemma [2751 We can 
regard ^ as a character of Gal(i^/Q). Since Gal{K/F) acts trivially on Ga\{L/K) 
and Gal{L' / K) , it follows that L and L' are abelian extensions of F. Since [iiT : F] 
is prime to p, there exist cyclic extensions J and J' of i^ of degree p such that 
L = KJ and L' = XJ'. Now Gal(i^/Q) acts on both Ga\{J / F) and Gal(J7F) by 
the character ^, so J and J' are dihedral extensions of Q of degree 2p. 

By our assumption on the ramification of primes £ ^ p, the extensions J / F and 
J' / F can ramify only at primes above p. The class number of i<" = Q(^— p) is not 
divisible by p (because it is less than p; see for example ^6, page 365]). Hence, by 
class field theory, one sees that F has only one cyclic extension of degree p that 
is both unramified outside of p and dihedral over Q. (This extension is the first 
layer of the so-called "anticyclotomic" Zp-extension of F.) Therefore, we must have 
J = J' , and hence L — L'. Now E is p-exceptional by Proposition 12.21 D 

Let Amin(£') and Ainin(F') denote the discriminants of minimal integral models 
for E and E' , respectively. 

Theorem 2.7. Assume that 4"^^^ has order 2 and that E has semistable reduction 
at all primes £ dividing the conductor of E, except possibly £ — p. Then E is p- 
exceptional if and only i/ A„iin(F')/Aniin(-E') = p'^w^ for some a € Z and w S Q^ . 

Proof. Suppose first that £ ^ pis a prime where E has split multiplicative reduction. 
Then E is a Tate curve over Q^. Let qE,e denote the corresponding Tate period for 
E. Then we have 

QiiE[p]) = Q^/Xp, ^/qEl) 
and therefore the ramification degree for £ in Q(£'[p]) is divisible by p if and only 
if ordi[qE,i) ^ (mod p). Furthermore, we have (Proposition VIL5.1(b) of jT8] ) 

ordf (A„iin(-E)) = -OTdi{j{E)) = OTdi{qEj)- 

Thus, the ramification degree for £ in Q{E[p])/Q is divisible by p if and only if 
ordf (Amin(-E')) is not divisible by p. This criterion is also valid if E has nonsplit 
multiplicative reduction at £, since both the ramification degree for £ in Q(i?[p]) 
and the power of £ dividing A,„in(£') are unchanged by twisting F by a quadratic 
character that is unramified at £. 

By Lemma [2. 3[ at least one of the integers ord^(A,„in(_E)), ord^ (A,„in(£")) is 
divisible by p. Therefore, both are divisible by p if and only if their difference is 
divisible by p. Now apply Proposition l2.6l D 

3. Twisting Xi(7) by characters 

Fix a field k of characteristic different from 7. Suppose i/j : Gk ^ Fy is a 
homomorphism. In this section we will construct the family of all elliptic curves 
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over k with a fc-rational subgroup of order 7 on which Gk acts via the character ip. 
The method of our construction is as foUows. When ip — 1, we are parametrizing 
eUiptic curves with a point of order 7, so the desired eUiptic curves are the fibers 
of the universal ehiptic curve £i over the modular curve Xi{7) of genus zero. For 
general tp, we twist the elliptic surface £i to obtain the appropriate elliptic surface 
£^, and then the A^ are the fibers of £^. Theorem 13.61 deals with the case where 
■0 has order dividing 3. Since any character ■0 into Fj can be written uniquely as 
the product of a character of order dividing 3 and a character of order dividing 2 
(namely, ip = ip^ip^), we will obtain the family for a general -0 as a quadratic twist 
of a family with a cubic ip, in Theorem 13. 101 

Definition 3.1. If E,E' are eUiptic curves over k, and P G E{k^),P' e E'{k'^) are 
points of order 7, we say that A : {E,P) —> {E',P') is an isomorphism if A is an 
isomorphism from E to E' and A(P) = P'. If such a A exists, we say that (E, P) 
and (£", P') are isomorphic. If further A : -E -^ -E' is defined over k, then we say 
that {E,P) and {E',P') are isomorphic over k. 

Lemma 3.2. Suppose E,E' are elliptic curves over k, P (z E{k^),P' G E'(k^) are 
points of order 7, and {E,P) is isomorphic to {E' ,P'). 

(i) The isomorphism A : {E,P) — > {E',P') is unique. 
(ii) Suppose that the groups ^ and $' generated by P and P' , respectively, are 

stable under Gk- Then {E,P) and {E',P') are isomorphic over k if and 

only if the two characters 

Gk ^ Aut(*) ^ F^ , Gfc -> Aut(*') A F^ 
are equal. 

Proof. If A, A' : {E,P) ^ {E',P') are isomorphisms over k^, then e = A~^ o A' is 
an automorphism of E fixing P, i.e., (e — 1)(P) = 0. But then (viewing e as a root 
of unity in an imaginary quadratic field) if e 7^ 1 we have 

7< |ker(e-l)| = dcg(e - 1) = (e-l)(e-l) = 2 - (e + e) < 4 

which is impossible. This proves (i). 

For (ii), let ip and ip' be the characters giving the action of Gk on ^ and 4'', 
respectively. If cr S Gk, then X'^ : E ^ E' is an isomorphism, and 

X^P) = X%r\a)P'^) = ^J-\a)X{Pr = r\cT){Pr - V^-i(a)V/(a)F' 

If -0(cr) = -4}'{a), then A"^ : {E,P) ^ {E',P') is an isomorphism, so A'' == A by 
part (i). On the other hand, if V(o-) 7^ ip'{cr), then X" {P) ^ X{P), so A"" ^ X. This 
proves (ii). D 

If M e k^ , define a curve E^ over k{u) by 

(1) Eu:y'^-{u^-u- l)xy - {u^ - u^)y = x^ - {u^ - u^)x^ . 
The discriminant of E^ is 

(2) A(E„) =u^(m- 1)^(^3 -8u2 + 5u+ 1). 

The next resuh is #15 in Table 3 on p. 217 of [10 . 

Theorem 3.3 ([T0|). (i) If u £ k and A(£'„) 7^ 0, then Eu is an elliptic 

curve over k and (0, 0) is a point of order 7 in E{k). 
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(ii) // E is an elliptic curve over k and P G E{k) is a point of order 7 then 
there is a unique u € k such that {E, P) is isomorphic over k to {Eu, (0, 0)). 

Define a linear fractional transformation 

(3) r^{v) = l/(l-v). 

The following lemma will be used in the proofs of Theorems 13.61 and 15.51 below. 

Lemma 3.4. Suppose u Cz k^ and A(i?„) ^ 0. Then there is a unique isomorphism 
defined over k{u): 

(s^(„),2.(o,o))^(ii;„,(o,o)). 

Proof. A direct computation shows that the map 

(x, y) 1-^ {{u - l)'*x + u'^ ~u,{u~ ify + {u - l)'^{u'^ - 2u)x + 7/ - 2u^ + u"^) 
is such an isomorphism. Uniqueness follows from Lemma l3.2r i). D 

The following lemma is taken from a paper of Washington [23l pp. 64-65]. 

Lemma 3.5 (Washington |23|). Suppose that K/k is a cyclic cubic extension, and 
a is a generator ofGal{K/k). Then there is at ^ k such that 

(i) K is the splitting field of the polynomial f{x) :— x^ — {t + 3)a;^ +tx + l, 
(ii) if ^ is a root of f then 7*^ = 7/(7), where rj is the linear fractional trans- 
formation defined by ^. 

Proof. Choose a G K such that K = k{a). The set {l,a,a"' ,aa'^} is linearly de- 
pendent over k (but {1, a} is not), so we can find a linear fractional transformation 
(j) e PGL2(fc) such that a"^ = 0(a). Note that 0^ fixes a, a'^, and a'^ , so 0^ = 1 
inPGL2(fc). 

Let (j) be an element in GL2(fc) whose image under the map GL2(fc) — >■ PGL2(fc) 
is 0. We must have trace((/)) ^ 0. Otherwise, 0^ would be a scalar matrix and we 
would then have a"" — a. Therefore we can choose the lift so that trace(0) — —1. 
Then, writing / for the identity in GL2{k), 

0^ + = -det(0)/, 03 = al 
for some a £ k, so 

(1 - det(0))0 = + 03 + 02 = (a - det(0))/. 
Since a'^ 7^ a, cannot be a scalar matrix. It follows that det(0) = 1 and the 
minimal polynomial of over k is x"^ -\- x -\- 1. Let t) = [ J , which is a lift to 

GL2(fc) corresponding to rj. Since i) has the same minimal polynomial as 0, there 
is a ^ g GL2(fc) such that 

(4) rfC = fl- 

Set 7 — ^(a), where ^ is the linear fractional transformation corresponding to ^. 
Then ^(7) = k{a) ~ K, and by ^ we have 

(5) 7" = ^(7). 

Applying a and a^ to ((5)) shows that ([5]) holds with 7 replaced by either of its 
conjugates, and that 7'^ = (7 — l)/7- We compute 

(:, _ ^)(^ _ ^-)(:, _ ^-^) ^ ^3 _ (2!-32±i):,2 _^ (l!_|llti):, + 1 
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SO the lemma holds with t := '^ ~ ^ + g fc. Q 

Theorem 3.6. Suppose that x '■ Gk — >■ Fy is a homomorphism, x^ — 1; '^'^'^ E is 
an elliptic curve over k. Then E has a k-rational subgroup of order 7 on which Gk 
acts via x if o,nd only if there is a v (z k such that E is isomorphic over k to the 
elliptic curve 

Ay : y^ + a\{v)xy + a3{v)y = x^ + a2{v)x'^ + a4{v)x + aQ{v) 

over k defined as follows. If x — ^, l^t 

ai{v) = —v"^ + V + 1, a2{v) — a3{v) — —v^ + v'^ , 04(1;) — aQ{v) — 0. 

^/x 7^ 1; then let K he the cubic extension of k cut out by x, l^t a G Ga,l{K/k) be 
the element with x((t) = 4, fix i G fc satisfying Lemma \3.5\ for K and a, and let 

c = t2 + 3t + 9, /(v) =w^ - (t + 3)u^+to + l, 

ai{v) = c{v^ — w + 1), 

a2{v)^cf{v)t{2v-l), 

a3{v) = cf{v)[{t^ - l)v^ + (t^ -l)v + t^ -t + 1], 



ai{v) = c2/(w)[(-3i2 - 5i - 2^" + (2^^ + gt^ + 8i - 7) 



V 



- {M^ + 6t^ + 5i - 20)^3 + {2t^ - t - 23)v^ + 2{t^ + 2t + 7)v-t- 1], 

aeiv) = c^f{vf[{2t^ + 9t^ + 23^^ + 35^^ + 24t + ll)^'^ 

+ {-t^ - 6i^ - 23^"* - 38i^ - 33*^ + 36i)w^ 

+ {t^ + 6i^ + ISi'^ - 6i^ - eOi^ - 180i + Vd)v^ 

+ {-f - 2t^ + 46t^ + 84^2 + 142i - 139)u^ 

+ {-t^ - bf^ - 27t^ - 15^2 + 9t + 182)t;2 

+ {2t^ + 3t^ - lOt^ - 32t - 67)w + 2t^ + 5t^ + lit + 11]. 

Proof. If X = 1, then Ay is the curve Ey of ([T]), and the theorem follows from 
Theorem [231 

Suppose now that x 7^ 1- Let 7 e ii' be a root of f{x). Define 

Uy := ((7 - l)v + 1)2(27^ - {2t + 5)7 + t - 1)', 
Rv ■■= c/(w)[(7 - t - 3)71' - 7' + (i + 2)7 + 1], 
Sy -.^ {{t + 3)72 - (t^ + 5t + 9)7 - 3)v^ 

- (2*7^ - 2(t2 + 3t + 3)7 +{t^+t + 3))v - 37^ + (2t + 6)7 - t, 
Ty := cf{v)[{2t^ +6t + b)v^ - (t^ + 3t + 9)v^ - 13v + 2t + 4]. 

If w G fc and Ay is nonsingular, then we compute that Py := {Ry,Ty) is a point of 
order 7 in Ay{K), and using Lemma p.Sp fii) we compute that Py = iPy = x{<^)Pv 
Thus Py generates a /c-rational subgroup of order 7 on Ay, on which Gk acts via x- 
If E is isomorphic over k to Ay, then E also has such a subgroup. 

Conversely, suppose E is an elliptic curve over k with a /c-rational subgroup of 
order 7 on which Gk acts via x- Let P G -E'(/f) be a generator of that subgroup (so 
P'^ = x{(^)P = 4P). By Theorem [n3i;ii) applied with K in place of k, {E, P) corre- 
sponds to a iC-rational point of Xi(7), i.e., there are s. u £ K and an isomorphism 
ip: E ^ Eu defined over K such that (^(P) = (0, 0) G Eu[7]. 



10 R. GREENBERG, K. RUBIN, A. SILVERBERG, AND M. STOLL 

Let 6 be the linear fractional transformation 

— z + 7 



and let v — 5^^{u) £ K. We compute that the map A defined by 

Xix, y) := (f/> + i?„, U^y + U^Sx + T,) 

is an isomorphism over K from {Eu, (0, 0)) to {A^, Py). (Since 5{v) — u^hy ^ we 
have (7 — l)v + 1 7^ 0; since also [^(7) : fc] = 3, we have Uy ^ 0.) Therefore A o t^ 
is an isomorphism from {E,P) to {Ay,Py). If we show that v Cz k, then Lemma 
I3.2r ii) will imply that {E,P) and {Ay,Py) are isomorphic over k. 
Suppose a E Gk- Then (p'^ is an isomorphism from E to E^" , and 

ip^iP) = p^iiP") = 2ip''{P'') = 2ip{Py = 2(0,0)'" = 2(0,0). 

Thus we have isomorphisms 

(S„,(0,0)) -^ iE,P) -^ (S„., 2(0,0)) -^ (S^-i(„.),(0,0)) 

where 77 is defined by ([3]) and the final isomorphism comes from Lemma 13.41 Thus 
by the uniqueness of u in Theorem I3.3r ii) (applied with K in place of k) we see 
that u = r]~^{u'^), so u'" — ?/(u). 

Using the definition of 6 and Lemma f3.5r ii). it is easy to check that S'^ — r/S. 
Hence we have 

Therefore u € fc, so Ay is defined over fc, Gk acts on both P and Py by multiplication 
by Xj and so the isomorphism Xoip : (E, P) — > (Ay, Py) is defined over k by Lemma 
ii). D 



Remark 3.7. Suppose x 7^ 1 in Theorem 13.61 With notation as in Theorem 13.61 
the discriminant of Ay is given by 

(7) A(yl„) = c^f{vy[{t - b)v^ + (5t + 24)w^ - (8t + 9)w + t - 5]. 



Remark 3.8. With notation as in Theorem 13.61 with x 7^ li the cubic Galois 
extension if of fc is the splitting field over k of the polynomial f{x) £ k[x], by 
Lemma 13. 5f i). Thus, f{x) is separable and irreducible over k. One can compute 
that c^ is the discriminant of /, so c 7^ 0. It then follows from ([7]) that A{Ay) = 
for at most six values of v € k^ . 

Definition 3.9. If E is an elliptic curve over k and e : Gk —> {±1} C Aut(_E) is a 
homomorphism, then the (quadratic) twist oi E by e is an elliptic curve E^"^' over 
k such that there is an isomorphism A : E^'^'^ — >■ E over k^ with X°' o \~^ = e{a) for 
all a £ Gk- 

If char(fc) ^ 2, E is an elliptic curve over k defined by an equation of the form 
y2 — F{x), and k{\/d) is the field cut out by such a character e, then E^'^^ is 
isomorphic over k to the curve defined by dy"^ = F{x), i.e., the quadratic twist of 
E by d. 

Theorem 3.10. Suppose that ip : Gk — > F^ is a homomorphism. If E is an elliptic 
curve over k, then E has a k-rational subgroup of order 7 on which Gk acts via V' 
if and only if there is a v € k such that E is isomorphic over k to the twist of Ay 
by ip^ , where Ay is as in Theorem \3.6\ for the character x = V'^- 
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In particular, i/char(fc) ^ 2 and k{Vd) is the field cut out by ip^, then the twist 
of Ay by ■0'^ is 

AW : 2/2 ^ a;3 + db2{v)x^ + M%i{v)x + lM%fi{v), 

where 62 = a? + 4a2, &4 = 204 + Oia^, b^ — a^ + Aoq are the usual invariants of the 
curve Ay. 

Proof. Since 4'^ — 1, we have (ip^)'^ ~ 1, so we can apply Theorem 13.61 and we can 
also twist by 4'^ as in Definition 13.91 Let A : E^'^ ^ ^ S be as in Definition 13.91 
For P e -B(fc") and a e Gfc, P'" = 'ipicr)P if and only if X-^{Py = 4'^{a)X-^{P). 
Thus by Theorem [311 

E has a /c-rational subgroup of order 7 on which Gk acts via "0 

<^ E^^ ' has a fc-rational subgroup of order 7 on which Gk acts via V''* 
<^ E^^ ' is isomorphic over k to A^, for some u G fc 
<^ i<^ is isomorphic over k to A^^ ■' for some v G k. 
If char(fc) 7^ 2, then A^, -^ is a Weierstrass model for AJ, . D 

Lemma 3.11. Let Ay be as in Theoreni \3.10l and let rj be as defined by ^. Then 
for every v, we have A^,, = Ay over k{v). 

Proof. This can be shown by exhibiting an explicit isomorphism. We will give a 
slightly less computational way to deduce the lemma from Lemma 13.41 We can 
easily reduce to the case d = 1. 

Let 6 be the linear fractional transformation defined by ^ in the proof of Theo- 
rem 13.61 The proof of Theorem 13.61 showed that {Ay,Py) = {Eg^^y^, (0, 0)) for every 
V, so we have 

{Ay,Py) = {Es^y), (0,0)) = (i?^5(„),2 • (0,0)) = {As-i,jS(v),'2 ■ Ps-^ri5{v)) 

where the middle isomorphism is from Lemma 15^ A simple calculation shows that 
5~^riS{v) = rf = rj^^, and so Ay = A^-i(„) over k{v) by Lemma [3?2][ii) . D 

Corollary 3.12. Suppose that ip : Gk — > F^ is a homomorphism. If k ^ F2, then 
there exists an elliptic curve E over k with a k-rational subgroup of order 7 on 
which Gk acts via ip- If k = F2, then there exists an elliptic curve E over F2 with 
an F2-rational subgroup of order 7 on which G-p,^ acts via ip if and only if ip is u!~^ 
or Lu^^e, where e is the unique character of G-p,^ of order 2 and uj is the cyclotomic 
character. 

Proof. Let Ay be as defined in Theorem 13. 6[ for the (at most cubic) character ip'^. 
If w G A; is not a zero of the discriminant A{Ay), then Theorem l3. 101 shows that the 
twist of Ay by ip^ has the desired property. Suppose fc 7^ F2 . We need only show 
that there exists a u e fc such that A{Ay) ^ 0. 

Suppose 4^ = 1. Then Ay = Ey, so A{Ay) = A(£:^,) is given by ©. That 
polynomial has at most 5 roots, and it is easy to check that it has only the roots 
and 1 if |fc| < 5. Hence, there are v ^k with A(A„) 7^ if and only if /c 7^ F2. 

Now suppose tp^ ^\. Then A(>1^) is the polynomial given in ([7]). By Remark 
13.81 c 7^ 0, and f(v) ^ for every v £ k. Thus for v € k, A{Ay) = if and only 
if (t - 5)v^ + {5t + 24)z;2 - {8t + 9)v + t - 5 = 0. If < 7^ 5, then A(A„) ^ when 
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V = 0. If t = 5, then A{Av) = only when v = or 1 (since char(fc) ^ 7), so there 
are v £ k with A{Av) 7^ if and only if fc ^ F2. 

When fc = F2, the stated result follows from the above proof, the fact that w 
has order 3, and the fact that t — 1 when ■0^ = cj while i = when ip'^ = uj~^. 
(Alternatively, it can also be deduced from the fact that no elliptic curve defined 
over F2 has a rational point of order 7, which follows from the Weil bounds.) Note 
that the remaining characters are 1, w, e, and we; for each of these characters there 
is no elliptic curve over F2 with an F2-rational subgroup of order 7 on which Gpa 
acts via that character. D 

Remark 3.13. Here is another interpretation of Theorem 13.101 Suppose ^ is a 
cyclic group of order 7 with an action of G^ . Consider isomorphism classes (in the 
obvious sense) of pairs (E, f) where E is an elliptic curve and / : vj/ ^-> E[7] is 
an injection. We say that {E,f) is fc-rational if (E"' , f^) is isomorphic to {E,f) 
for every a £ Gk, and we let X{'^) denote the moduli space of such isomorphism 
classes. If K is an extension of k such that Gk acts trivially on ^, and P is a 
generator of ^, then the map 

iEJ)^{EJiP)) 

induces an isomorphism from X{'$) to Xi(7) defined over K. Thus X{'^) is a twist 
ofXi(7). 

Let ip : Gk -^ Aut(^) = Fy be the character giving the action of Gk on 4*. 
Let Ay be as defined in Theorem 13.61 with x = V'''; and let /„ : XP — ?► Ay[7] be the 
unique homomorphism with /„ (P) ~ Py , where Py is as in the proof of Theorem 
13.61 Then Theorem 13.101 says that the elliptic surface A^ is the universal elliptic 
curve over A"(^), in the following sense. For every v £ k^ such that A{Ay) 7^ 0, the 
pair {Ay,fy) is fc(u)-rational, and conversely for every pair {E,f) with E defined 
over fc^, there is a unique v £ k^ such that {E, /) is isomorphic to {Ay, fy). 

If a S F7 /(±1) there is a natural automorphism of X($) induced by (E, f) 1— > 
{E, af). The proof of Lemma 13.111 shows that the automorphism corresponding to 
a = 2 is r/, in the sense that (A^(„), /,,(„)) = {Ay, 2fy). 

4. The special case where fc = Q and ^p ~ uj^ 

As before, let uj : Gq — > F^ denote the cyclotomic character, and if E is an 
elliptic curve defined over Q, let Amin(P) denote the discriminant of a minimal 
model of E. 

Define an elliptic curve 

(8) By:y^+xy^x^-x^+a{v)x + P{v), 
where 

a{v) := -f|«8 + fv^ - ^v^ + fv^ + ^v^ - fv^ + ^v^ + |« - 2, 

R(o,\ •- -49 12 I 637, ,11 _ 1617„10 , 44149 9 _ 16555, ,8 _ 1477, ,7 , 1911, ,6 
f^y^J ■~ 32'' "^ 48 ^ 32 "^ "^ 432 ^ 192 "^ 36 "^ 16 "^ 

_ 8183, ,5 _ 2009, ,4 , 7007, ,3 _ 147 2 , 14„ _ 1 
144 ^ 192 "^ "•" 432 "^ 16 ''^ """ 3 '^ 

The discriminant of By is 

(9) A{By) = -t{v^ -2v'^ -v + l){v^ - u^ - 2w + 1)^ 
Theorem 4.1. Let By he as above. 
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(i) Suppose E is an elliptic curve over Q. Then E has a rational subgroup of 
order 7 on which Gq acts via uj^ if and only if there is a f G Q such that 
E = By over Q. 
(ii) If p is a prime and u G Q is integral at p, then the above model for By is 

integral at p and minimal at p. 
(iii) If p is a prime and w G Q is not integral at p, then 

ordp(A„,i„(B„)) = ordp(A(B„)) - 24ordp(w). 

Proof. We will deduce part (i) from Theorem 13.101 The cyclotomic character w 
has order 6. Let ip — uj^. The cubic character ip^ = uP' cuts out the unique cubic 
subfield K :— Q(/i7)+ of Q(/i7). The automorphism u G Ga^iC/Q) that sends 
Cr + C7^ to Q + C^^ satisfies aj(cr) = 2, so i\:i(a) = 2^ = 4. Using the construction 
of 7 and t in the proof of Lemma l375l we obtain t = — 2 and 7 = — (C? + C-T^)- 

Further, the quadratic character ^'^ = uj'^ cuts out the unique quadratic subfield 
Q(a/~7) of Q(/X7). The map (a;, y) i-^ {x',y') where 

a:'^lx + lv^~lv'~iiv' + fv~l, y'^\v-\x' 

is an isomorphism from the curve Ay of Theorem 13. 101 with t = — 2 and d = —1/7, 
to the curve By of ([8]) (recall that t is in the definition of Ay in Theorem 13. 61 which 
is used to define Ay in Theorem 13. lOp . Now (i) follows from Theorem 13. 101 

The polynomials a{v) and /3(w) take Z to Z, as can be seen, for example, by 
expressing them as integral linear combinations of binomial coefficient polynomials 
(^) . It follows that if u G Q is integral at p, then the model ([8]) is integral at p. 

Suppose first that p ^1 . With C4 the usual invariant (see [HI §IIL1]), we check 
that the polynomial c^(By) is in Z[u]. The resultant of the polynomials A{By) 
and C4{By) is 7^^, which is a unit at p. Hence if v is integral at p, then A{By) 
and C4{By) cannot both vanish mod p, so by Tate's algorithm (or [T51 Proposition 
IIL1.4(ii)]), the equation defining By is minimal at p. 

Ii p = 7 and w G Q is integral at 7, then Lemma I4.4r c) below shows that 
ord7(A(_B„)) < 12, so the equation defining By is minimal at 7. This proves (ii). 

Now suppose that v is not integral at p. Then w :~ 1/v is integral at p, and via 
the change of variables 

(x, y) ^ (u;^^ - H^, u;6y + If^lM^x + H^), 
By has a model 

By : y^ + xy — x^ - x'^ + (q;(w) + ^(1 - w^))x 

+ /3(u;) + ^a(u;)-2Hl!^J^ 

where a{z) :— z^a{l/z), l3{z) :— z^'^(3{l/z) G Q[z] with a and /3 as in (|S]). Again, 
one can check that the polynomials 

d(z)+3(l-zS)/16 and /3(z) + (z"* - l)(5(z)/4 + (-22^^ ^ 3z® - 1)/16 

take Z to Z. Hence By is integral at p. Exactly as for (ii) one can show that By is 
minimal at p, and hence Aniin(-Bt)) = ^{By) = v^'^'^A{By). This proves (iii). D 

Remark 4.2. Theorem I4.1f i) shows that for t; G Q, the representation of Gq 
acting on By [7] is of the form ( '^^ % ) . 
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Corollary 4.3. //w G Q has denominator d, then 

A,„in(B„) = A{B^)d^'^ = -^l^d^'^iv'^ -2v^-v + l)(w3 - v^ - 2v + 1)^. 
Proof. This follows directly from Theorem 14. If ii.iii) . 



D 



Lemma 4.4. Let /i (v) = u'^ — 2w^ — v+l and /2 (w) = u'^ — w^ — 2u + 1 . i'^or z) e Q 
and By as above, we have the following table: 



(a) 
(b) 
(c) 
(d) 
(e) 

Proof. If V is not integral at 7, then ord7(/i(i;)) = ord7(/2(w)) = 3ord7(w). If v 
is integral at 7, then a direct computation shows that fi{v),f2{v) ^ (mod 7^). 
Since fi{v) = [v - S)^ (mod 7) and /2(v) = (d - 5)^ (mod 7), (a) and (b) follow. 

By dni) we have A{Bv) = — 7^/i(w)/2(w)^, so (c) follows from (a) and (b). Asser- 
tion (d) follows directly from (c) and Theorem 14. l( ii.iii') . 

We compute that 





V integral at 7 


V not integral at 7 


v = 3 (mod 7) 


v = 5 (mod 7) 


otherwise 


ord7(/i(z;)) 


1 








3oTdr{v) 


Ord7(/2(«)) 





1 





3oTdr{v) 


ord7(A(i?„)) 


4 


10 


3 


3 + 24ord7(v) 


ord7(Ami„(Bi,)) 


4 


10 


3 


3 


ord7(j(B.)) 


> 2 


>5 









(10) 



J (By) 



[{v^ -3v- 3)(i;2 -v + l)(3w2 - 9v + 5){5v^ 



1)]3 



h{v)f2{vy 



If u = 5 (mod 7), then each quadratic factor in the numerator vanishes modulo 7. 
If w = 3 (mod 7) , then w^ — w + 1 = (mod 7) . If w ^ 3 or 5 (mod 7) , then none 
of the factors in the numerator vanish modulo 7. These remarks together with (a) 
and (b) imply the assertions in (e). D 

Proposition 4.5. For t; e Q and By as above, let '^„ be the (^-rational subgroup 
of By of order 7 on which Gq acts via uj^ . Let B^ be the quotient of By by ^y, so 
there is an isogeny from By to By defined over Q . Then the isogenous curve By is 
isomorphic over Q to the twist of Bi-y by uj^ . 

Proof. One can verify this by a direct calculation, using the formulas of Velu [22] 
(see PI §4.1]) to exhibit the isogeny. (See especially Proposition 4.1 of [5] and the 
formulas for A and B in the paragraph after its proof.) D 

Note that By has a subgroup of order 7 on which Gq acts via w^, namely 
By[7]/'$y. Also, the twist of i?i_« by uj^ is the quadratic twist of i?i_„ by —7. 



Corollary 4.6. Suppose v £ Q. Then: 



(i) 



Amin(-B(,) 



(ii) ord7 



js. 



{By) 

Aniin(-S(;) 



2^2 



1 



y2 ~ 2w + 1 



for some Sy G {±6}, and 



if V is integral at 7 and v = 3 or 5 (mod 7), 
otherwise. 
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Proof. Let fi{v) ~ v — 2v — v + 1 and /2(v) = t' — u — 2ti + 1 as in Lemma HU) 
let B[zJ denote the quadratic twist of i3i_„ by —7, and let 

Note that /i(l — w) = ~f2{v) and /2(1 — w) = —fi{v). Since w and 1 — u have 
the same denominator, by Corollary 14. 31 we have 

A„,in(Bi_„)/A,„i„(B„) = /l(«)V/2(«)'. 

By Proposition 113] we have B'^ = ^ill,^- Thus 

^ ' A„i„(B,) A„,i„(B,) A,„i„(B„) ^/2(«), 

proving (i). 

To prove (ii) we need to compute Sy. Using Lemma l4.4r e'). it follows that 

ordj{j{B[-_l^)) = ord7(j(i?i-„)) > 0. 

Hence, by Tate's algorithm (see for example [181 Table 15.1]), we have 

< ord7(A„in(BJ:^^)) < 10. 

It follows that the integer s„ of (fTT|) satisfies 

^ ^ f 6 iford7(A,„i„(Bi_„)) <6 
""" \"6 iford7(A,„i„(Si_„)) >6. ■ 

Now Lemma l4.4r d) shows that s^, = — 6 if w is both integral at 7 and congruent to 
3 (mod 7), and s„ = 6 otherwise. Assertion (ii) now follows from (|12p and Lemma 
|43i;a,b). D 

Proposition 4.7. Suppose that v E P^(Q). Then: 

(i) The conductor of the elliptic curve By is of the form 'idY[i=i^i^ "where the 

£i 's are distinct primes such that ii = ±1 (mod 7). 
(ii) The curve By has potentially good reduction at 7. Further, if v is integral 
at 7 and w = 3 or 5 (mod 7), then By has potentially ordinary reduction at 
7, and for all other v € P^(Q), By has potentially supersingular reduction 
at 7. 
(iii) The conductor of By is 49 if and only if v € {0, 1, oo, 2, 1/2, —1}. 

Proof. Lemma l44r e) shows that j{By) is integral at 7 for all v G P^(Q). Hence By 
always has potentially good reduction at 7, giving (ii). However, By cannot have 
good reduction at 7. One sees this by considering the action of Gq^ on By [7] . If By 
had good ordinary reduction at 7, then By[7] would have a nontrivial unramified 
quotient over Q7 (by [El Proposition 11]), which is not the case since w^ and w^ 
are ramified characters of Gq^ . If By had good supersingular reduction, then By [7] 
would be irreducible over Q7 (by [TH Proposition 12(c)]), which is also not the 
case. It follows that the conductor of By is 49M, where M is not divisible by 7. 

By examining the elliptic curves over F7, we see that an elliptic curve E over Q 
has supersingular or potentially supersingular reduction at 7 if and only ii j(E) = 
— 1 (mod 7). If w is integral at 7 and satisfies ii = 3 or 5 (mod 7), then Lemma 
I4.4r e) shows that j{By) = (mod 7), and so By has potentially ordinary reduction 
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at 7. For the other v's, the formula for j{Bv) m (fTO|) shows that we indeed have 
j{Bv) = — 1 (mod 7). This proves (ii). 

Suppose £ is a prime dividing M. If By has additive reduction at £, then By 
becomes semistable over Q(i3„[7]) and the ramification degree of £ in [Q(i3„[7]) : Q] 
is divisible by 2 or 3. (A good summary of the ramification properties in the non- 
semistable case can be found in TB', §5.6], especially Proposition 23(b).) This 
contradicts the facts that £ is unramified in Q{fJ,^)/Q and [Q(_B.„[7]) : Q{fi-^)] is 
(by Remark l4.2p 1 or 7. Thus, By has multiplicative reduction at i. It follows that 
M is not divisible by £'^. 

The action of Gq,, on By[7°°] can be described by the Tate parametrization. 
One sees that i?i;[7], or an unramified quadratic twist of -Bti[7], has composition 
factors isomorphic over Q^ to fij and Z/7Z. Let uje denote the restriction of uj 
to Gqj. Thus, Gqi acts on the composition factors by two F^ -valued characters 
whose ratio is uje, or its inverse. On the other hand, Gq^ acts on the composition 
factors via w| and w|, whose ratio is w^ , a character of order 1 or 2. Therefore uji 
has order 1 or 2, so ^ = ±1 (mod 7), giving (i). 

There are exactly two j-invariants of curves of conductor 49. Using (|10|) we see 
that these correspond precisely to the six values of v listed in (iii) . D 

Remark 4.8. There is an S'a-action on P^(Q) defined by the linear fractional 
transformations 77 of ([3|) and t defined by t{v) = I — v. Since the fixed points of 
77 (the primitive sixth roots of unity) are not in Q, the orbits under the action of 
77 always have length 3. There are just two orbits of length 3 under the action of 
S3. For V is in such an orbit if and only if 1 — w = rj^iv) for some i € {0, 1, 2}. One 
easily determines the possible orbits of that type: {0, 1, 00} is one, {2, 1/2, , — 1} is 
the other. By Proposition 14. 7r iii) the corresponding curves By have conductor 49, 
and hence have complex multiplication. One can also explain this as follows. 

By Proposition 14. 5[ the elliptic curves B[Zy and By/'^y are Q-isomorphic for 
every w e P^(Q). However, if 1 — 1; € {v.rj(v).r]^(v)}. then Lemma 13. Ill shows that 
_Bi_u is Q-isomorphic to By, so there is an isomorphism By/'^y = By defined over 
F — Q(V— 7). Therefore, By has an endomorphism of degree 7 defined over F. 
This means that By has CM by F. Furthermore, since a CM curve has no primes 
of multiplicative reduction. Proposition 14.71 shows that the the conductor of By is 
49. Ii V G {0, 1, 00}, then j{By) = —15'^ and End(i3i,) is the maximal order in F. 
If 1; e {2, 1/2, , —1}, then j{By) = 255"^ and End(i?„) is the nonmaximal order of 
conductor 2 in F. 



5. The image of pe.i 

Suppose E is an elliptic curve over Q with a Q-isogeny of prime degree p > 7. 
We retain the notation of ^ Note that since tpip = uj, we have that ip(p~^ has 
order 2 if and only if tjj'^ = w^. 

By Theorem ll.2l ([71 Theorem 1]), if E is p-exceptional then 4"P~^ has order 2. 
If p > 7 then Proposition 11.31 ([71 Remark 4.2.1]) says that if ■ip(p~^ has order 2 
then E has CM by Q(-\/— p). If E has CM, then iinage{pE,p) is a p-adic Lie group 
of dimension 2, and so it cannot contain a Sylow pro-p subgroup of Aut{Tp{E)) . 
Thus for p > 7, an elliptic curve over Q is p-exceptional if and only if it has CM 
by Q(y=p). 
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However, for p — 7, it is possible for ip^^^ to have order 2 even if E does not 
have complex multiplication. For example, for every w G Q, the curve By of fj4lti£^s 
a Q-isogeny of degree 7 with ip = uj^ and ipV~^ = w'^ of order 2. In this section we 
will use Theorem 12.71 to study 7-exceptional curves. We assume from now on that 

For j e Z, let Cj denote the curve 

y-^ — 2v^ — V + 



(13) w^ = 7^ 



^2 - 2w + 1 



Lemma 5.1. (i) For every j G Z, t/ie curve Cj has genus 12. 

(ii) If7\j, thenC,{Q)=9. 

Proof. The curves Cj are degree 7 covers of P^(C) with six branch points, each 
with ramification degree 7, so by the Riemann-Hurwitz formula they have genus 
12. 

To prove (ii), we will show that Cj(Q7) =0if7-|'j. Themap(i;,w) i-^ {l/v,l/w) 
defines an isomorphism from Cj to C-j. Since Cj = Cj' if j = j' (mod 7), it suffices 
to consider just j = 1, 2, and 3. Then if {v,w) is a point on Cj or C-j defined 
over Qy, and v G Z7, then w G Z^ ; this follows immediately from Lemma IT4l a.b) . 
which is clearly valid even for v G Q7. Thus, to show that Cj(Q7) is empty, it 
suffices to show that neither of the equations 



v'- 


-2v'^ -v + l = 


= 7^w^v^ - 


9 

- V - 


2w + l) 


v^- 


-v'^ -2v + l = 


= 7^w'^{v'^ - 


-2^2 


-w + 1) 



has solutions v,w G Z7. Ii j — 2 or 3, this follows from Lemma |4]4l[a,b) since the 
powers of 7 on the two sides differ. If j — 1, then one finds easily that neither 
equation has a solution modulo 7"^. D 

Recall the elliptic curve By defined by ([8]) , and the definition of p-exceptional in 
Definition 11.11 



Proposition 5.2. Suppose f G Q. Then the following are equivalent: 

(i) By is 7-exceptional; 
(ii) there is a w € Q such that {v,w) G Co(Q). 

Proof. By Proposition 14.71 By has multiplicative reduction at all primes of bad 
reduction different from 7. Thus we can apply Theorem 12.71 to By with j> = 7 to 
conclude that 



Assertion (i) ^=^ .'""'" G 7^ • (Q 

1)3 - 2w2 - w + 1 ^ '^ 
^3 _ ^2 _ 2u + 1 
^ -2v^ -v + l 



g7^-(Q^)^ 



G7^-(Q^)^ 



the middle equivalence by Corollarv I4.6f i). This in turn is equivalent to saying 
there is a point {v,w) G Cj(Q) for some j with < j < 6. But by Lemma [OJii) , 
Cj{Q) is empty if 1 < j < 6. This proves the lemma. D 
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Theorem 5.3. Suppose that E is an elliptic curve over Q with a Q^-isogeny of 
degree 1. Then the following are equivalent: 

(i) E is 7 -exceptional; 

(ii) E is a quadratic twist of By for some {v,w) G Co(Q). 

Proof. Suppose (i), i.e., the image of pE,7 does not contain a Sylow pro-7 subgroup 
of Autz7(T7 (£')). By Theorem ll.2l f[7l Theorem 1]), ip(p~^ has order 2, so by Lemma 
12.51 we have ip(p^^ — w^. Since i/jip — uj, we have ip"^ — ip"^ = uj^. Let e — tpuj. Then 
e is a quadratic character, ip = uj^e, and ip = uP'e. Replacing E by its quadratic 
twist by e, we may assume that ip = uj^ and ip ^ uj'^. By Theorem 14. iT i). we have 
that E ^ By for some v E Q. Now the theorem follows from Proposition [521 O 

The curve 

^ 7 v^ -2v^ -v + 1 
Co : w' = — 



3 - li2 _ 2w + 1 

of (fTB]) has a nonsingular model C C P^ x P^ with coordinates {{v : u),{w : z)) 
(that we will abbreviate as (w, w)) given by 

w'^{v^ - v^u - 2vu^ + u^) = z^{v'^ ~ 2v^u ~ vu'^ + u^), 

which has good reduction outside of 7. By Theorem 15. 3[ we wish to determine 
C(Q). One finds easily the following rational points on C. Let 

Fo = (0,l), Pi = (1,1), Poo = (c»,l), 

P2 = (2,-l), F3 = (i-1), P4 = (-l,-l) 

and 

Z = {Po,Pl,Poo,P2,P3,P4} C C(Q). 

Theorem 5.4. C(Q) = Z. 

We will prove Theorem 15.41 using the method of Chabauty, as made explicit in 
|20) . Before that we deduce the following consequence. 

Theorem 5.5. If E is an elliptic curve over Q with a (^-rational subgroup of order 
7, andE is exceptional for 7 , then E has CMbyQiy^), i.e., j{E) G {-15^,255^}, 
i.e., E is a quadratic twist of an elliptic curve of conductor 49. 

Proof. By Theorem 15. 3[ E is a, quadratic twist of By for some {v,w) G C(Q). By 
Theorem 15. 4[ (w, w) G Z . If v G {0, 1, oo}, then By is isomorphic to the curve 49A1 
in Cremona's tables ^. If w G {2,1/2,-1}, then By is isomorphic to the curve 
49A2. D 

We observe that C has an action of the symmetric group S^ , generated by the 
two involutions 

a:[v,w)i — >{v^^,w^^) and t:(w, w): — >{l — v,w~^). 

It has the two orbits {Po, Pi, Poo} and {P2, P3, P4} on the set Z of known rational 
points. 

The involution a has exactly the two fixed points Pi and P4, therefore the 
quotient of C by a is a curve D of genus 6. The Jacobian J of C is isogenous to a 
product of two copies of the Jacobian of D. The genus 6 curve D is 

y7 _ 7^5 ^ -^4y3 _-jY ^ {2X^ - QX^ -7X + 24)/(x3 - SX^ - AX + 13) 



ON ELLIPTIC CURVES WITH AN ISOGENY OF DEGREE 7 19 

which by a change of variables is 

(-2 + y)(-l -2Y + Y'^ + Y^f = X/{1 -AX + SX^ + X^). 

6. The rank of J(Q) 

Let J be the Jacobian of C . The first step in bounding C(Q) is to compute the 
rank of J(Q). In this section we prove that the rank is 6. We first prove that 6 is an 
upper bound, following the method described by Poonen and Schaefer in |15j . To 
keep our notation as close as possible to theirs, we replace C by the (birationally) 
isomorphic curve 

X -.y^ = {x^ -2x^ -x + l){x^ -x^ -2x + if. 

Let C be a primitive 7-th root of unity, /c = Q(C), O = Z[C], and tt = ^ — 1 G O, 
a generator of the prime ideal of O above 7. We identify O with a subring of 
Endj,(J) by sending C, to the automorphism of J induced by the automorphism 
(x, y) I— > [x, C,y) of X. We will use |15) to compute an upper bound for the size of 

J{k)/TTj{k). 

Define 

J{x) = {x^ -2x^ -x + l){x^ -x"^ ~2x + if, 
fo{x) = {x^ -2x'^ ~x + l){x^ -x^ -2x + 1). 

A calculation in PARI/GP shows that the roots of x^ — 2x^ — a: + 1 are ai := 
1+C+C e fc for 1 < i < 3, and the roots of x3-x2-2a:+l are a, := -Q-C' e k 
for 4 < i < 6. In particular, / and /o factor into linear factors in k[x\. 

Suppose X is a field containing k. Let Ii\v{X/K) denote the group of i^-rational 
divisors on X , i.e., the group of Z-linear combinations of points in X{K) that are 
fixed by Gk^ let T)\v'^{X/K) denote the subgroup of divisors of degree zero, and 
let V\c°{X/K) = V)iY^{X/K)/P{X/K) where P{X/K) is the group of divisors of 
ivT-rational functions on X (i.e., the principal divisors). Since X(k) is nonempty, 
there is a natural isomorphism Pic'^ {X / K) = J{K), and we will identify these two 
groups. 

If i? is a (multiplicative) abelian group, let 

V{R) := {R/R^f/{R/R^) 

where R^ denotes seventh powers in R, and R/R'^ is embedded diagonally in the 
direct product [R/R'^f. 

In [iSl §5], Poonen and Schaefer define what they call the "(x — T) map" for 
every field K containing k: 

{x - T)k ■■ J{K)/nJ{K) -^ y(if X). 

This map is characterized as follows, li D = ^pnpP e Div"(A) is supported on 
points P E X{K) with x-coordinate x{P) ^ {ai : 1 < i < 6} U {oo}, then 

{x ~ T)k{D) := \{{{x{P) - ai)"-, . . . , {x{P) - a^f-)- 
p 

Lemma 6.1 (Poonen-Schaefer [15j). Suppose K is a field containing k, and P ~ 
{x{P),y{P)) € X{K). Let oo denote the rational point with x = oo, i.e., the point 
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corresponding to (oo, 1) on the nonsingular model C of X. If x{P) ^ {ai -1 <i < 
6} U {cxd} then 

{x - T)k{P - ^) = {x{P) - ai, . . . , x{P) - ag). 

Proof. This follows from [151 Proposition 5.1]. D 

There is a natural localization map from y(fc^) to V{k'^), where /c^ is the 
completion of k at tt. Let N be the "weighted norm" map from §6 of [15] : 

N : V{k'^) -^ k^/ik^y, {zi, Z2, Z3, Z4, Z5, ze) >-> ziZ2Z3{z4Z5Zey. 

Theorem 6.2 (Poonen-Schaefer [15 ). In the commutative diagram 

J(fc)/7rJ(fc) ^"'^^' ^ y(fcx) 



t/ie maps {x-'T)k and {x~T)k^ are injective, and the image of {x—T)k is contained 
in 

^(©[l/Tr]^) n kcr(iV) n loc;;^(image((x-r)fcJ). 

Proof. That the maps are injective follows from [W\ Theorem 11.3], since X has 
/c-rational points and f{x) factors into linear factors in k[x]. 

Let U denote the image of (a; - T)k. Then U C T/(0[l/7r]^) by [HI Proposition 
12.4] since J has good reduction outside of 7, and U C ker(A^) by [HI Proposition 
12.1]. The commutativity of the diagram shows that U C loc~ (image((a; — T)^^)). 

" D 

Lemma 6.3 (Poonen-Schaefer [15]). We have 

(i) dimp^ J{k)[n] = 4, 
(ii) dimp^ J {kT^) / 1: J {k,^) = 16. 

Proof. Assertion (i) is [151 Lemma 12.9], since f{x) factors into linear factors in 
A; [a;], of which 6 are distinct. 

Similarly, fTF, Lemma 12.9] shows that dimp^ J{k.^)['K\ = 4, and then [I5l Lemma 
12.10] shows that 

dimp^ J{k^)/TTj{k^) ^ g + dimp^ J{k,r)[Tr] = 12 + 4 = 16, 

where g = 12 is the genus oi X. D 

Proposition 6.4. ranko J(/c) < 6. 



Proof. We will use Theorem 16.21 to bound the O-rank of J{k). All of the terms in 
Theorem 16.21 are Fy-vector spaces, and we need to compute them explicitly. 

It follows from Theorem 5.1 of Chapter 3 of [TT], and the fact that Q(C+C~^) ^''^^ 
class number one, that ©[I/tt]^ is generated by the roots of unity, the cyclotomic 
units, and n. Thus an Fy-basis of C'[l/7r]^/(0[l/7r]^)^ is given by {C, 1 + C, 1 + 

We need to compute the image of {x~T)k^. By Theorem l6.2l and Lemma|6?3l[ii), 
dimp7(image((a:: — T)k^)) = 16. Using PARI/GP, we find points Qi = {xi,yi) S 
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X{kTr) for 1 < i < 6 with x-coordinates: 

Xi =0, X2 ^ -1, 

X3=3 + 4tt'^ + Svr^ + tt"* + 4tt^ + 2tt^ + Gtt'^ + Stt^ + Svr^ + 5tt^° , 
X4 = 3 + n^ + bn^ + Stt'' + 57r^ + 5tt^ + 2tt^ + Stt^ + tt^°, 
CCS = 3 + TT^ + 27r'* + 4:TT^ + 2tt^ + vr^ + 2tt^, 
xe^3 + 2TT^ + 5n^ + n* + Btt^ + 27r* + 67r^ + 2tt^" 

+ 5^" + 47ri2 + 27ri4 + 27ri5 + evr^e + ^"^ 

Using PARI/GP and Lemma \6A\ we compute {x — T)k^{(j{Qi) — oo) for 1 < i < 6 
and for all cr S S, and we find that those values generate an Fy-subspace of V{kJ^) 
of dimension 16. (We work inside the F7- vector space k^ /{k^Y , using the basis 

{tT, 1 + TT, 1 + TT^ 1 + TT^, 1 + TT*, 1 + 7^^ 1 + TT^, 1 + TT^}.) 

It follows that we have found the full image of {x — T)/.^. 

Using the above information, a linear algebra computation in PARI/GP now 
shows that 

dimF,(y(0[l/7r]^)nker(7V)nloc^^(image((a;-r)fcJ)) = 10. 
Therefore by Theorem 16.21 we have dimpy J {k) / it J {k) < 10. Since 
dimp.^ J{k)/iTj{k) = rank^ J(fc) + dimpy J{k)['K\, 
and dimpy J(fc)[7r] = 4 by Lemma 16.3^ 1). we conclude that ranko J(/c) < 6. D 

Lemma 6.5. rankz J(Q) < 6. 
Proof. This follows from Proposition [63] and J^ Lemma 13.4]. D 



Remark 6.6. We now elaborate on the path that led to the proof that |C(Q)| = 6 
(although it isn't actually used in our proof). The subgroup of J(Q) generated 
by differences of known rational points on C has rank 4. Since J is Q-isogenous 
to Jac(-D)^, the rank of J(Q) is even, so it must be either 4 or 6. The S's-action 
shows that |C(Q)| is divisible by 6. A Chabauty argument at the prime 2, using 
[20) . then gives that |C(Q)| is 6 or 12. The argument is as follows. Consider the 
pairing J(Q2) x ri(C/Z2) — ^ Q2 defined by G,w ^-> {G,uj) := /^.w where Q{C/L) 
is the set of holomorphic differentials on C over L and G is a degree divisor on 
C. View Z C G(Q) C J(Q) (fixing a basepoint in Z) and let 

V -.^{uje n{C/Z2) : (J(Q),w) = 0} C 1^0 := {^ e ^{C/Z2) : {Z,uj) = 0}. 

Let V (resp., Vq) be the image of V (resp., Vq) under the reduction map il{C /Z2) — >■ 
n{C/F2). Then dimp^ V = rankz^V > 12 - rank J(Q) > 6. Let 

W ■.= {uje n{C/F2) : ordp(w) > 2 for all P e {Fo,^i,-Poo}}. 
If |C(Q)| = 12,j^ach fiber of C(Q)^ C(F2) has size 4, and it follows (using g^) 
that V CWnVo. So if dini(IF n Vq) < 6, then |C(Q)| = 6. Balakrishnan, using 
ideas of Kedlaya and Wetherell, computed Jp lo for lo e fl{C /Z2) and P,Q e Z. 
This gives Vq and Vq. Unfortunately, dim(iy n Vq) = 6. However, if rank J(Q) 
were 4, then dimp^ V — rankzjV^ > 12 — rank J(Q) = 8. This would imply that 
|C(Q)| = 6, since V CWnVo when |G(Q)| = 12. 
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This gave motivation to determine the rank of J(Q). Assuming analytic con- 
tinuation and functional equation of the L-function, and using Fourier coefficients 
provided by Balakrishnan, Sutherland, and Kedlaya and the information, provided 
by the last author of this paper, that the Euler factor at 7 is 1, Rubinstein performed 
computations that gave convincing evidence that the analytic rank of Jac(£') is 3 
(and the conductor is 7^^, the most it can be according to a theorem of Lockhart- 
Rosen-Silverman), so one expects the rank of J(Q) to be 6, not 4. This gave 
motivation to find additional generators of J(Q), which we do next. 

Theorem 6.7. rankz J(Q) = 6. 

Proof. By Lemma [631 we have rankz J(Q) < 6. 

We look for closed points of higher degree on the genus 6 quotient D of C. For 
D, we use the model in P'^ obtained as the image of the map sending a point (v, w) 
onCto {v + - : w + — : — + — : 1). This model is a smooth curve of genus 6 (and 
degree 10) still having bad reduction only at 7. We intersect D with hyperplanes 
and quadrics of increasing height and split the resulting divisor as a sum of prime 
divisors. If it splits, we check if the new prime divisor leads to a larger subgroup 
in the Jacobian of D. For this check, we use the homomorphism 

Pic(i^) — > Y[ Pic{D/Fp) 

pes 

where S* is a suitable set of primes (we used S = {2, 3, 5, 11, 13, 17}); compare [21] 
for details. 

In this way, we find a point of degree 4 that leads to a larger group that is still 
of rank 2, and a point of degree 8 that increases the rank to 3. Pulling back these 
points to C, we obtain a point of degree 8 of the form 

(-a"^ + 2a^ + a^ + a^ + 2, a) 

with a a root of 

t^ -2f -t'^ -t^ -2t+l, 
and a point of degree 16 of the form 

f^Yg (187/315 + 894;3i'* + 98;3i3 + AOS^^^ + 1037/3" + 1245/3^° + 1754;39 + 1371;3^ 
+ 783;3^ + 1702/3^ + 1497/3^ + 793/3* + 708/3^ + 250/3^ + 450/3 + 575), /3') 
with /3 a root of 

t^^ + 5t^^ + 2t" + 4f" + 5*12 j^ ^Q^ii _^ ^^^10 j^ -^3^9 ^ g^8 

+ 13t^ + llt*^ + lOt^ + df^ + 4t^ + 2t^ + 5t + l. 

Denote the corresponding prime divisors on C by Qi and Q27 and let Q3 and Q4 
be o-(r((5i)) and cr{T{Q2)), respectively. Let H C J(Q) be the subgroup generated 
by degree-zero linear combinations of the ten prime divisors: 

(14) {Fo, Pi,Poo,P2, Pz, Pa. Q1.Q2.Qz. Qa}- 

We compute that |J(Fi3)| = 3^ • 7^^ • 13^ • 349^ and therefore J(Q) has no 5- 
torsion. (By considering additional reductions one can show that | J(Q)tors| divides 
7^.) In addition, we check that the image of 

H -^ J(F2) X J(F3) X J(Fn) 
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has a quotient isomorphic to (Z/5Z)^. It foUows that rankzH > 6, so rankz J(Q) = 
6 and H has finite index in J(Q). D 



P2 + P3+Pi, 


P2+P00+ Q3 


2gi + g3. 



Remark 6.8. In the course of the calculations in the proof of Theorem 16.71 we 
showed also that the subgroup H C J(Q) is free of rank 6, and that the relations 
among the divisors (|14p are generated by: 

Po + Pi + Poo 

Pi + P4 + Qi 
5Po + 3Pi + 4Poo + 4P2 + 5P3 + 3P4 

7. Proof of Theorem 15.41 

Since the Mordell-Weil rank of J(Q) is smaller than the genus of C, we can apply 
Chabauty's method (see HHHn]) to calculate C(Q). 
Define divisors on C: 

3 6 

^rr == ^(a;,C) for a;e {0, 1,00}, G'i=^(a,,0), G2 =^{a^,(X)), 

where (as before), ai,a2,ci3 (resp., a^ja^^ae) are the roots of v^ — 2v^ — v + I 
(resp., v^ — v'^ — 2v + l). One checks easily that the divisors of the rational functions 
V, w, and v^ ~ v'^ — 2v + 1 are given by 

(15) iv) = Do-D^, {w)^Gi-G2, {v^-v^-2v + l)^7G2-3D^. 

If i is a field of characteristic different from 7, let VliC /L) denote the L-vector 
space of holomorphic differentials on G /L. If a; G n{G/L), let (w) denote the divisor 
of uj. 

Lemma 7.1. Suppose L is a field of characteristic different from 7. 

(i) The divisor of the differential dv is (dv) = 6G1 + 6G2 — 2Doc ■ 
(ii) A basis for the L-vector space Q,{C / L) is given by 

v^w-' 
w^j := -—^ 5 -r-^dv, < i < 1, < j < 5. 

'J (w3 - ^2 _2u + l)w6 - - ' -J- 

Proof. The function v has (simple) poles at each of the 7 points {(00, Q : C, € My}, 
and no other poles. Hence ord(oo.c) l*^^) = ~2, and ordp(du) > for all other 
points P. If a is a root of v^ — 2v'^ — w + 1, then the equation for C shows that 
ord(Q^o)(^ — a) is a (positive) multiple of 7. Since the polar divisor of v is Doo, we 
conclude that ord(Q,.o)(w — a) = 7, and 

orA(^a,o){dv) = orA(a,o){d{v - a)) = 6. 

Similarly, if a is a root of u'^ — u^ — 2w + 1 then OT:Aif^rya\{dv) — 6. Since the divisor 
[dv) has degree 2g — 2 = 22, we conclude that [dv) = 6G1 + 6G2 — 2D 00, giving (i). 



It now follows from p5|) that the differential lOij has divisor 

(a;,j) = iDa + (1 - i)Doo + jGi + (5 - j)G2. 

In particular ujij is holomorphic if (and only if ) < * < 1 and < j < 5. 

Since v is transcendental over L and w has degree 7 over P(u), the set {v^w^ : 
< « < 1, < j < 5} is linearly independent over P, so {w^ : < i < 1, < j < 5} 
is linearly independent over L. Since dimi(ri(G/P)) = genus(G) ~ 12, we have 
(ii). D 
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Let n[C /7i^) be the Zs-span of the differentials ujij with < i < 1 and < j < 5. 
Consider the bihnear pairing 

J(Q5)/J(Q5)tors X J7(C/Z5) ^ Qs 

of free Zs-modules of rank 12 with trivial left and right kernel that is used on 
p. 1210 of 120]. Let V C U,{C /7i^) be the orthogonal complement under this pairing 
of (the closure of) J(Q) C J(Q5). By Theorem 16.71 we have rankzJ(Q) = 6. 

Let V C Vt{C/Y^) be the image of V under the (surjective) reduction map 
reds : ^^(C/Zs) -^ VL{C/Fr^). Since lankxA^iC /Z^)) = 12 = diwLY.A^{C /¥z)), 
we have ker(red5) = 5ri(C/Z5). Since ^{C/7i^)/V is torsion-free, we have 5F = 
V n 5n(C/Z5) = ker(red5|y). Thus V ^ V/bV, so dYtn.F^{y) = rankz^Ct^) = 6. 

We will show that for each point P e C(F5), there exists a differential top £ V 
that does not vanish at P. Proposition 6.3 of [20] then shows that there is at most 
one point in C(Q) that reduces to P. Since the set Z C C(Q) bijects onto C(F5) 
via the reduction map, that will show Z — C(Q), as desired. 

Next we determine the space V explicitly. 

Using lattice base reduction (with higher weights on the higher-degree points), we 
find the following generators of the intersection of the known finite-index subgroup 
of J(Q) and the kernel of reduction mod 5: 

Bi=Pi-Poo + P2-Pi- 6Q2 + 6Q4, 

B2 = -4Po + 9Pco + 5P2 - 3P3 + Pi + 4Qi - 7Q3 + Q4, 

P3 = -4Po + 9Pi + P2 - 3P3 + 5P4 - 7Qi + O2 + 4Q3, 

P4 = -2Po - 2Pi 4^ 4Poo - IIP2 + I3P3 - 2P4 - 4Qi + Q2 - 2Q3 + 2Q4, 

P5 = -6P1 + 6P00 - 9P2 + 9P4 - 2O1 -Q2 + 2O3 + (94, 

Pe - lOPo - 8P1 - 14Poo + P2 - 7P3 - 6P4 - 12Qi + IIQ2 - I5Q3 + 4Q4. 

For each of these divisors Bm , we compute the Riemann-Roch space of iP^ + 12Po 
(with sign chosen in an attempt to make the computation more efficient). We check 
that it is of dimension one and that the same is true for the corresponding Riemann- 
Roch space over F5. Let fm be a function spanning the space; then it follows that 
the divisor of fm must be =F^m — 12Po + Dm with an effective divisor Dm of 
degree 12 supported in points having the same reduction mod 5 as Pq. (Note that 
the divisor of the reduction of fm mod 5 must be the reduction of ^Bm, since this 
reduction is a principal divisor and the Riemann-Roch space of the reduction of 
±Bm + 12Po has dimension one.) 

We write each basis element Uij S ^(C/Zs) as a power series in t times dt, 
where t = v is a, uniformizer at Pq (and also a uniformizer at the reduction of Pq 
mod 5). We then integrate formally to obtain the corresponding logarithms Ay 
as power series in t. These power series converge 5-adically on points in the same 
residue class as Pq. The expansion of fm as a Laurent series in t is of the form 
t^Fm{t) where n is —12 =F the multiplicity of Pq in Bm- After scaling by a power 
of 5 if necessary, the series Fm{t) is in Zsp], the coefficients of t'' with A: < 12 have 
positive valuation, and the coefficient of t^^ is a 5-adic unit. This reflects the facts 
that Dm has the same reduction mod 5 as 12Po, and Pq is not in the support of 
the reductions mod 5 of any of the Qi or Pj with j ^ (as is easily checked). We 
multiply this series by an invertible series in Z5 |i] such that we obtain a polynomial 
of degree 12 (to sufficient 5-adic precision). The roots of this polynomial are then 
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the values ti, . . . ,ti2 of t at the points in the support of Dm- We can then easily 
compute the power sums of these values (by looking at the logarithmic derivative 
of the reverse of the polynomial, see again [^) and therefore evaluate the integrals 

12 
[A„-12Po] k=l 

The values are in 5Z5. Dividing by 5 and reducing mod 5, we obtain a linear 
relation that every differential in V has to satisfy. 

We used Magma [1] for these computations. A recent version (2.17-1) spends 
less than 16 hours on current hardware to produce the relations we are looking for. 
We obtain a 6-dimensional space of relations generated by the following elements 
(in terms of the basis dual to woo, • • • , <^05, '^lOi • • • : "^is): 

(1,0,0,0,0,0,4,1,1,3,3,4), 

(0,1,0,0,0,0,1,1,0,2,3,0), 

(0,0,1,0,0,0,3,4,0,0,4,2), 

(0,0,0,1,0,0,3,1,0,1,1,2), 

(0,0,0,0,1,0,0,2,3,0,0,4), 

(0,0,0,0,0,1,1,2,2,4,4,2). 

As stated above. Theorem 15 .41 would follow if we can find, for P E C^F^), a differ- 
ential LUp G V that does not vanish at P. Next we give an explicit differential uj 
that works for aU P e CiF^). Let h{v,w) = 3 + w + 3w^ + 2w^ + v{w'^ + 2w^), 
f2{v) — v"^ — v^ — 2v + 1, and 

UJ := 3^00 + ^01 + 3^03 + 2wo4 + 1^12 + 2^13 = '- — • — — - e fliC/F^). 

w^ 72 (w) 

The coefficients of the uJij that define w satisfy the relations above, so uj G V. 

If < z < 4 then p^ and Lemma rOT i) show that dv/f2{v) does not vanish at 
Pi. By inspection h{v,w)/w^ does not vanish at Pi, so uj does not vanish at Pi. 

Similarly, dv/ f2{v) vanishes at Poo but vdv/ f2{v) does not, by p5|) and Lemma 
IT.lT i) . Since w^ -\- 2w'^ also does not vanish at Poo , it follows that uj does not vanish 
at Poo . This concludes the proof of Theorem 15.41 

As an independent check, we have performed a similar computation on the 
curve D. There are four points in D{F^) that are images of points in C{F^). 
For each of these points, we find a differential that kills the Mordell-Weil group 
of D and whose reduction mod 5 does not vanish at the given point. This shows 
that D can have at most four rational points that are in the image of C(Q); this 
number is accounted for by the known points. 
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